🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8326 Upstream summary: The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202105-38 Related CVEs: CVE-2021-23017 CVE-2024-7347 CVE-2024-24989 CVE-2024-24990 Upstream summary: It was discovered that nginx did not properly handle DNS responses when “resolver” directive is used. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xapian-omega — cross-site scripting vulnerability Related CVEs: CVE-2009-2947 Upstream summary: Olly Betts reports: There's a cross-site scripting issue in Omega – exception messages don't currently get HTML entities escaped, but […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1990-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0090 Upstream summary: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4931 Upstream summary: gpw generates shorter passwords than required Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-1432 CVE-2013-6885 CVE-2013-6400 Upstream summary: pkgsrc audit-packages flagged xenkernel42<4.2.3 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1432 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21704 Upstream summary: log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 70.3.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-setuptools 70.3.0-r0 Related CVEs: CVE-2024-6345 Upstream summary: Alpine main repository for vv3.19 ships py3-setuptools 70.3.0-r0 which addresses CVE-2024-6345. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2659 CVE-2005-2930 CVE-2005-3318 CVE-2006-3178 CVE-2007-0619 Upstream summary: Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4739 Upstream summary: reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file […]
